CVE-2011-0694

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

Cross site scripting

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

CVE-2011-0694

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrows...

CVE-2011-0694

RealNetworks RealPlayer (Windows) with versions 11.0–11.1.1.x/SP 1.0–1.1.5 and 14.0.0–14.0.1, plus Enterprise 2.0–2.1.4, is affected by CVE-2011-0694. The flaw is in the temporary-file naming scheme used to store references to Real Media files, which is easily predictable and can be brute-forced ...

RealNetworks RealPlayer Buffer Overflow Vulnerability (Windows)

This host is installed with RealPlayer which is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerbofvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ RealNetworks RealPlayer Buffer Overflow Vulnerability Windows Authors: Madhuri D - Updated By: Madhuri D on...

RealNetworks RealPlayer Buffer Overflow Vulnerability - Windows

RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer code execution

It's possible to save and execute file...

RealNetworks, Inc. Releases Security Updates for RealPlayer

RealNetworks, Inc. has released security updates to address a vulnerability affecting Windows RealPlayer 14.0.1 and earlier versions and RealPlayer Enterprise 2.1.4 and earlier versions. Exploitation of this vulnerability may allow an attacker to execute arbitrary code in the context of the...

RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the temporary fil...

Heap overflow

Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted header in an AVI file...

CVE-2010-4393

RealNetworks RealPlayer vulnerability CVE-2010-4393 involves a heap-based buffer overflow in vidplin.dll when parsing AVI headers. Affected products include RealPlayer 11.0–11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0–1.1.5. The issue permits remote code execution via a crafted AVI header...

CVE-2010-4393

Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted header in an AVI file...

RealNetworks, Inc. Releases Update for RealPlayer

RealNetworks, Inc. has released an update for Windows RealPlayer 14.0.1 and prior to address a vulnerability. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks, Inc. security advisory and appl...

RealPlayer for Windows < Build 12.0.1.633 Multiple Remote Code Execution Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple code execution vulnerabilities : - A heap corruption vulnerability when processing AVI headers. CVE-2010-4393 - A flaw exists in the temporary file naming scheme used for storage...

Realplayer vidplin.dll AVI Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Realnetworks Realplayer SP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SuSE 10 Security Update : RealPlayer (ZYPP Patch Number 6266)

RealPlayer 10 is vulnerable to a critical security problem in the flash plugin CVE-2007-5400. Real does not provide updated binaries of RealPlayer 10 and SUSE is not allowed to ship RealPlayer 11. Therefore this update disables the flash plugin by setting restrictive file system permissions...

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution

No description provided by source. Sources: http://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt html p Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX functio...

Real Networks RealPlayer SP - RecordClip Method Remote Code Execution

Real Networks RealPlayer SP - RecordClip Method Remote Code Execution Sources: https://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplaye...

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution

Exploit for windows platform in category remote exploits Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program...

Real Networks RealPlayer SP - 'RecordClip' Method Remote Code Execution

Sources: https://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin...